PRIVACY AND COOKIES POLICY GENERAL PROVISIONS Managing cookies contains the rules of policy files with personal data and cookies on the website https://en.fabricart.eu (hereinafter referred to as the "Website”). The administrator of personal data collected via the Website is LennyLamb Sp. z o. o. Sp. k., Kłudzice 9, 97-330 Sulejów, with the NIP 5213754292, REGON 365795034, entered into the National Court Register under the number 0000642698 (hereinafter referred to as the "Administrator”). Contact with the administrator is available at the following e-mail address: contact@lennylamb.com or by calling: +48 22 257 88 82. Each entity using the Website is its User. Personal data of the Website User are regulated by the Administrator in accordance with applicable law, in particular in accordance with Regulation of the Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 /EC (General Protection Regulation) (hereinafter referred to as "GDPR"). Contact with the Data Protection Officer is available at the following e-mail address: iod@perfectinfo.pl. PROCESSING OF PERSONAL DATA Personal data will be processed for the following purposes: sending marketing information to people subscribing to the Newsletter, on the basis of expressed consent (Article 6 (1) (a) of the GDPR); enabling the purchase of products offered by the Administrator in the online store, on the basis of a concluded sales contract (Article 6 (1) (b) of the GDPR); keeping accounting and tax books, issuing invoices, based on the legal obligation incumbent on the Administrator (Article 6 (1) (c) of the GDPR); pursuing any claims or defending against them, based on the legitimate interest of the Administrator. (Article 6 (1) (f) of the GDPR). Personal data will be processed: until the consent to send marketing information as part of the newsletter is withdrawn; in the period necessary to perform the concluded contract, extended by archiving and tax obligations resulting from legal provisions; during the assertion of possible claims or defense against them. Under the terms of the GDPR, the data subject has the following rights: the right to request access to the content of your data, obtain a copy and rectify it; the right to limit processing and to delete data, unless there are circumstances limiting the exercise of these rights; the right to object to processing pursuant to Article 6 (1) (f) of the GDPR; the right to withdraw consent to the processing of personal data, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal; the right to lodge a complaint with the President of the Personal Data Protection Office. In the event that personal data are processed on the basis of legal provisions, their provision is mandatory. Providing personal data processed on the basis of consent/agreement is voluntary. However, refusal to provide them will prevent the provision of services. Due to the fact that personal data may be stored on OVH servers, administered by OVH Groupe SAS (2, rue Kellermann, 59100 Roubaix), we would like to inform you that these servers are located in Canada. DATA RECIPIENTS Users' personal data may be processed by the Administrator's subcontractors, i.e. entities whose services are used by the Administrator. The administrator uses only the services of such processors who provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the GDPR and protects the rights of the data subjects. The transfer of data by the Administrator does not take place in every case and not to all recipients or categories of recipients indicated in the privacy policy - the Administrator provides data only when it is necessary to achieve a given purpose of personal data processing and only to the extent necessary to achieve it. Users' personal data may be transferred to the following recipients or categories of recipients: service providers providing the Administrator with IT, technical and organizational solutions, enabling the Administrator to run the company's operations, including the website and electronic services provided through it (in particular computer software providers for running the Website, e-mail and hosting providers and software providers for managing the company and providing technical support to the Administrator). providers of legal, accounting and advisory services providing the Administrator with accounting, legal or advisory support. COOKIES Cookies are small text information in the form of text files, sent by the server and saved on the side of the person visiting the Website (e.g. on the hard drive of the computer, laptop or on the smartphone's memory card - depending on which device Website User uses). The Administrator may process the data contained in Cookies when using the Website by the User for the following purposes: adjusting the content of the Website to the individual preferences of the User (e.g. regarding colors, font size, page layout) and optimizing the use of the Website; keeping anonymous statistics showing how to use the Website; remarketing, i.e. researching the behavior of website visitors through anonymous analysis of their activities (e.g. repeated visits to specific pages, keywords, etc.) in order to create their profile and provide them with advertisements tailored to their expected interests, also when they visit other websites on the Google Inc. advertising network and Facebook Ireland Ltd.; The Administrator informs the User that it is possible to configure the web browser in such a way that it will not be possible to store cookies on the User's end device. In such a situation, the use of the Website by the User may be difficult. The administrator indicates that cookies may be deleted by the User after they have been saved by the Administrator, through the appropriate functions of the web browser, programs used for this purpose or by using the appropriate tools available as part of the operating system used by the User. OTHER TECHNOLOGIES Google Analytics The website uses the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Activities in this area are carried out by the Administrator based on the legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the creation of statistics and their analysis in order to optimize websites. Information on the User's use of the Website is automatically collected by Google Analytics and stored on a Google server in the United States. The User's IP address is shortened before forwarding. In certain situations, the full IP address of the User is transferred to the Google server in the United States and then shortened there. The anonymized IP address provided by the User's browser as part of Google Analytics is, as a rule, not combined with other Google data. Google LLC based in the USA, using the technical infrastructure located in the USA, ensures an adequate level of protection of the processed personal data, accepted by the European Commission. The User may prevent the recording of the data collected by cookies regarding the User's use of the Website by Google, as well as the processing of this data by Google, by installing a browser plug at the following address: https://tools.google.com/dlpage/gaoptout. Details on data processing as part of the Google Analytics service are available at: https://support.google.com/analytics/answer/6004245. Google Adwords The website uses Google AdWords marketing tools provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Thanks to Google Adwords, the Website is promoted in search results and on third party websites. Activities in this area are carried out by the Administrator based on a legitimate interest (Article 6 (1) (f) of the GDPR), which is marketing of own products or services. When visiting the Website, Google AdWords automatically saves a cookie remarketing file on the User's device, which allows displaying advertisements based on the User's interests. Further data processing takes place when the User has consented to Google to combine the browsing history and use of the application with the User's account and the use of information from the Google account to personalize the ads displayed on websites. If the User is logged in to his Google account while viewing the pages of the Website, Google will use the User's data together with Google Analytics data to create and define lists of target groups for remarketing purposes on various devices. For this purpose, Google temporarily combines the User's data with Google Analytics data to create target groups. Google LLC z siedzibą w USA wykorzystując infrastrukturę techniczną znajdującą się w USA, zapewnia odpowiedni poziom ochrony przetwarzanych danych osobowych akceptowany przez Komisję Europejską. Google LLC based in the USA, using the technical infrastructure located in the USA, ensures an adequate level of protection of the processed personal data accepted by the European Commission. The user may disable cookies used for remarketing as part of their Google account settings. Details on data processing as part of the Google AdWords service are available at: https://policies.google.com/privacy. Google Tag Manager The website uses the Google Tag Manager tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. With the help of Google Tag Manager, the Administrator controls the conduct of advertising campaigns and the manner in which the User uses websites belonging to the Website. Activities in this area are carried out by the Administrator based on the legitimate interest (Article 6 (1) (f) of the GDPR), which is the marketing of own products or services and the optimization of the Website's pages. When visiting the Website, a Google cookie is automatically saved on the User's device, which with the help of a pseudonymous identifier (ID) and based on the history of visited pages allows displaying interest-based advertising, controlling the effectiveness of these ads and other activities related to controlling the User's behavior on the website. Google LLC based in the USA, using the technical infrastructure located in the USA, ensures an adequate level of protection of the processed personal data accepted by the European Commission. The user may disable cookies used for remarketing as part of their Google account settings. Details on data processing as part of the Google Tag Manager service are available at: https://policies.google.com/privacy. Facebook Pixel The administrator uses the Facebook Pixel services provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland). Thanks to the Facebook Pixel tool, the Administrator can measure the effectiveness of his advertisements and adapt advertisements to a given User. The legal basis for the above actions is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR). The Facebook pixel automatically collects information about the use of the Website by the User, and then transfers this data to its servers in the EU or in the United States and stores it there. Based on the collected information, the Administrator is not able to identify a given Website User. The collected data allows only to determine what actions the User has taken on the websites. Detailed information on the operation of the Facebook Pixel can be found at the following internet address: https://www.facebook.com/business/help/742478679120153?helpref=page_content Managing the operation of Facebook Pixel is possible through the ad settings on your Facebook account: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. For more detailed information on data processing by Facebook, please refer to their Privacy Policy available at: https://www.facebook.com/privacy/explanation. Facebook ensures an adequate level of protection of the processed personal data, accepted by the European Commission. Information on the purpose of data collection, their scope and further processing and use by Facebook is provided in the privacy policy available on the website: https://www.facebook.com/legal/FB_Work_Privacy, Server logs Using the Website involves sending queries to the server on which it is stored. Each query directed to the server is saved in the server logs. Logs include IP address, server date and time, information about the web browser and operating system used by the User. The collected logs are stored for an indefinite period of time as auxiliary material used to administer the Website. The information contained therein is not disclosed to anyone except those authorized to administer the company's servers and network. Based on the log files, statistics can be generated to help in administering and managing the website. Collective summaries in the form of such statistics do not contain any identifying Website Users.